From ff7fb675f12aeecdb7603d244f940286e00fa106 Mon Sep 17 00:00:00 2001 From: Wim Taymans Date: Tue, 22 Jul 2025 09:43:50 +0200 Subject: [PATCH] pod: avoid overflow in _frame() --- spa/include/spa/pod/builder.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spa/include/spa/pod/builder.h b/spa/include/spa/pod/builder.h index 2e3f5982a..9fe6e6375 100644 --- a/spa/include/spa/pod/builder.h +++ b/spa/include/spa/pod/builder.h @@ -108,7 +108,7 @@ spa_pod_builder_deref(struct spa_pod_builder *builder, uint32_t offset) SPA_API_POD_BUILDER struct spa_pod * spa_pod_builder_frame(struct spa_pod_builder *builder, struct spa_pod_frame *frame) { - if (frame->offset + SPA_POD_SIZE(&frame->pod) <= builder->size) + if (frame->offset + (uint64_t)SPA_POD_SIZE(&frame->pod) <= builder->size) return SPA_PTROFF(builder->data, frame->offset, struct spa_pod); return NULL; }